Insurance Broker AI Governance Documentation: How to Help Your Clients Keep Coverage

You have probably already seen it in renewal packages: the Verisk CG 40 47 endorsement quietly attached to your client's commercial general liability policy. Maybe it is CG 40 48, the limitation form. Maybe it is CG 35 08 on their umbrella. Either way, AI exclusions are landing on commercial policies right now, and most of your clients have no idea what it means for them.

This guide is written specifically for you — the insurance broker or agent on the front lines of this shift. We will cover what is actually happening with AI endorsements, what documentation your clients need to protect their coverage, and how you can turn this emerging risk into a value-add conversation that deepens client relationships and generates referrals.

The Problem You Are About to Face at Every Renewal

Since January 2026, major carriers including AIG, WR Berkley, Great American, and Hamilton have started attaching AI technology exclusion endorsements to commercial policies. This is not a niche issue. Over 75% of small and mid-size businesses now use at least one AI tool — ChatGPT, Microsoft Copilot, Google Gemini, or industry-specific AI software. That means the vast majority of your book of business is affected.

The CG 40 47 endorsement is the broadest form. When attached, it completely excludes bodily injury, property damage, and personal/advertising injury claims that "arise out of" AI technology. The phrase "arising out of" is interpreted broadly in insurance law — it does not require AI to be the sole or even primary cause. If AI was anywhere in the chain of events, the exclusion can apply.

CG 40 48 is the limitation form, which is more favorable. It does not eliminate coverage entirely but adds sub-limits and conditions. CG 35 08 extends AI exclusions to umbrella policies, closing the safety net your clients might assume they still have.

Here is the critical insight for brokers: underwriters are making risk-based decisions about which form to attach. Clients who can demonstrate responsible AI governance are significantly more likely to receive the favorable CG 40 48 limitation — or avoid AI endorsements entirely — rather than the full CG 40 47 exclusion. This is where you come in.

Why AI Governance Documentation Is Now a Coverage Issue

Think of AI governance documentation the way you think about fire suppression systems or employee safety training records. It is not just a compliance exercise. It is evidence of risk management that directly influences underwriting decisions.

When an underwriter evaluates a commercial account that uses AI tools, they are asking one fundamental question: does this business have any controls around its AI usage, or is it the wild west? A business with zero documentation is an unknown quantity. The safest move for the carrier is to attach CG 40 47 and eliminate the exposure entirely.

A business that can present organized AI governance documentation tells a different story. It tells the underwriter: we know what AI tools we use, we have rules about how employees use them, we have human review processes in place, and we have a plan if something goes wrong. That is the kind of account an underwriter can work with. That is the account that gets CG 40 48 with reasonable sub-limits instead of the blanket exclusion.

For a deeper look at how AI insurance exclusions are reshaping commercial coverage in 2026, see our detailed breakdown.

5 Documents Every Client Needs in Their AI Governance Kit

Your clients do not need a 50-page compliance manual written by a $15,000 consultant. They need five specific, practical documents that directly address what underwriters are looking for. Here is what each one does and why it matters for their coverage.

1. AI Tool Registry

This is a complete inventory of every AI tool the business uses: what it is, what it does, who uses it, and what data it has access to. It sounds simple, but most businesses cannot produce this document because nobody has ever cataloged their AI usage. Underwriters want to see it because it demonstrates the business actually knows its own AI footprint. You cannot manage risk you have not identified.

2. AI Acceptable Use Policy

This is the employee-facing policy that defines the rules: which AI tools are approved, what tasks employees can use them for, what data can and cannot be input into AI systems, and what review is required before AI-generated output goes to a client or the public. This is the document that carries the most weight with underwriters because it shows the business has active controls, not just awareness. Your clients can start with our free AI policy generator to see what a basic version looks like.

3. AI Risk Assessment

This document maps each AI use case to its potential risks: data privacy exposure, accuracy concerns, regulatory implications, and liability scenarios. It does not need to be a formal actuarial analysis. A structured risk matrix that shows the business has thought through what could go wrong — and rated the likelihood and severity — goes a long way. It tells the underwriter the business is not blindly adopting AI without considering the downside.

4. Human Oversight Procedures

This documents the specific review workflows the business has in place. Who reviews AI-generated content before it goes out? What is the escalation path if AI output looks wrong? How are AI-assisted decisions validated? Carriers care deeply about this because "arising out of AI technology" becomes a much harder argument to make when there is a documented human review step between the AI output and the final action. It narrows the causal chain.

5. AI Incident Response Plan

What happens when something goes wrong? Who is notified? What is the containment process? How is the root cause documented? This is the same concept as a data breach response plan, but tailored to AI-specific scenarios: hallucinated content that reaches a client, biased output in a hiring process, or confidential data accidentally submitted to an AI tool. Having this plan signals to underwriters that the business is prepared, not just hopeful.

What to Tell Your Clients: Talk Tracks That Work

Having the right conversation with clients is everything. Here are tested approaches for different scenarios you will encounter.

For the client who does not think they use AI

For the client who knows they use AI but is not worried

For the client facing renewal in the next 90 days

For the client who just had an exclusion added

How This Becomes a Revenue and Retention Strategy

This is not just about being helpful — though it is that too. AI governance is a genuine opportunity for brokers who move early.

Retention: The broker who proactively warns a client about AI exclusions and helps them solve the problem is the broker that client never leaves. You are demonstrating expertise on a topic most brokers are not even talking about yet. When the client's friend at the chamber of commerce mentions their coverage got hit with an AI exclusion, your client says, "My broker already handled that for me."

Referrals: AI governance is a conversation starter that crosses industry lines. Every client who gets their documentation in order becomes a potential referral source. When they tell their business contacts, "My insurance broker helped me avoid an AI exclusion," that is a warm introduction to a prospect who suddenly realizes they have the same problem.

Positioning: The insurance industry is going through its biggest coverage shift since cyber liability emerged a decade ago. Brokers who develop expertise in AI governance documentation now will be the go-to advisors as this issue becomes mainstream over the next 12 to 24 months.

The Practical Workflow: From Conversation to Documentation

Here is a step-by-step process you can implement with your clients starting today:

1. Identify affected clients. Review your book of business. Any commercial client with more than a handful of employees is almost certainly using AI tools. Prioritize clients with renewals in the next 6 months.
2. Send them the risk calculator. Point clients to the free AI Risk Calculator to get a baseline assessment. This creates urgency without requiring a long phone call.
3. Have the conversation. Use the talk tracks above to match the client's situation. Focus on the concrete risk: a denied claim, not abstract compliance.
4. Recommend the Governance Kit. Point them to the CoverMyAI AI Governance Kit ($29). It takes 15 minutes. They answer questions about their industry, their AI tools, and their workflows, and they get all five documents customized and ready to go.
5. Use the documents at renewal. When the client's AI governance documentation is ready, include it in the submission package to underwriters. Present it proactively — do not wait for the carrier to ask. This frames your client as low-risk and gives the underwriter a reason to offer better terms.

What Happens If Clients Do Nothing

The cost of inaction is not hypothetical. Here is what you and your clients are facing:

• Full AI exclusion at renewal. Without governance documentation, the carrier defaults to CG 40 47. The client loses all coverage for AI-related claims across their GL policy.
• Umbrella gap. If CG 35 08 is also attached, the exclusion extends through the entire liability stack. There is no fallback.
• Denied claims. The client has a claim where AI was involved — even tangentially — and the carrier invokes the exclusion. The client is exposed, and the broker who did not flag this risk faces a difficult E&O conversation.
• Market hardening. As more carriers adopt AI endorsements, the options for placing accounts without exclusions narrow. Clients without documentation will find it increasingly difficult to get clean coverage at any price.

That last point is worth emphasizing. The E&O implications for brokers are real. If a client's claim is denied due to an AI exclusion that the broker never discussed, that is a failure to advise that could come back in a professional liability claim. Getting ahead of this issue is not just good service. It is good risk management for your own practice.

Free Tools to Share With Clients

You do not need to ask clients to spend money before they understand the problem. Start with these free resources:

• AI Risk Calculator — 60-second assessment that gives clients a risk score based on their industry, AI usage, and current coverage. Useful for creating urgency in conversations.
• Free AI Policy Generator — Creates a basic AI acceptable use policy. Good for showing clients what governance documentation looks like before they commit to the full kit.

Both tools are free, no credit card required. They work well as a low-friction first step that leads naturally into the conversation about the complete Governance Kit.

The Bottom Line for Brokers

AI governance documentation is not a nice-to-have anymore. It is a coverage prerequisite. The carriers have made their position clear with CG 40 47, CG 40 48, and CG 35 08. Businesses that demonstrate responsible AI governance will maintain better coverage terms. Businesses that do not will face exclusions, denied claims, and shrinking options.

As a broker, you are in the unique position to solve this problem for your clients before it costs them. The conversation is straightforward, the solution is affordable, and the value you deliver is tangible. Clients remember the broker who protected them from a risk they did not even know they had.

Start with your renewal pipeline. Identify the clients facing renewals in the next 90 days. Send them the risk calculator. Have the conversation. Recommend the kit. Include the documentation in the submission. It takes less time than you think, and the payoff — in retained clients, referrals, and professional reputation — is substantial.